Commit Graph

1536 Commits

Author SHA1 Message Date
0d536d11e3 Verify token signature in constant time, Run cheap checks first in token validation process (#1032)
* Verify token signature in constant time

To prevent timing side channel attacks

* Run cheap checks first in token validation process

Expensive checks such as the nonce lookup on the database or the
signature check can be run after cheap/fast checks.
2020-03-02 10:04:36 -06:00
e21f770485 Fix status check for channel page 2020-02-28 15:57:45 -05:00
697c00dccf Sanitize PLID 2020-02-28 14:10:01 -05:00
1caf6a3298 Fix deadlock when updating notifications 2020-02-28 13:13:48 -05:00
02fd02d482 Remove DB array concatenation 2020-02-28 12:14:29 -05:00
239fb0db94 Remove duplicated Github logo on footer (#986)
* Remove duplicated Github logo on footer
2020-02-20 18:50:54 -05:00
43da06a354 Remove temp fix for crystal/crystal-lang#7383 2020-02-20 18:30:46 -05:00
fea6b67067 Remove 'type' attribute from community embed 2020-02-20 18:30:46 -05:00
bc9dc3bf1e Update code formatting for Crystal 0.33.0
Crystal 0.33.0 introduced some changes to to the code formatter.
Run "crystal tool format" so CI doesn't fail anymore.
2020-02-15 19:52:28 +01:00
e3c10d779d Add support to read config from environment variable
Try to read app config from the "INVIDIOUS_CONFIG" environment variable.
If the variable is undefined, read config from config.yml file as before.

Required by https://github.com/omarroth/invidious/pull/1015 et al.
2020-02-04 15:53:46 +01:00
9841f74adc Add handling for comments with no content 2020-02-01 12:14:37 -05:00
b56e493d92 Remove frameborder from community embeds 2020-02-01 11:23:12 -05:00
a2c5211b20 Check /browse_ajax for channel blocks 2020-02-01 11:23:12 -05:00
648cc0f006 Refactor signature extraction 2020-01-24 17:02:28 -05:00
7baced75e5 Fix channel redirect 2020-01-14 08:21:17 -05:00
7b88d0efe3 Minor refactor 2020-01-08 20:27:21 -05:00
4aada65dae Fix channel playlists for genre channels 2020-01-08 20:26:47 -05:00
88a538e71b Minor refactor for channel playlists 2019-12-05 15:47:35 -05:00
513363504f Add better error message for fetch_channel 2019-12-05 15:46:21 -05:00
0e844edacb Add support for pt-BR 2019-12-05 15:26:35 -05:00
1499ce43bf Add support for Romanian locale 2019-12-03 19:41:58 -05:00
823603650f Add support for /sorry/index CAPTCHA 2019-12-03 19:14:11 -05:00
062867a38d Strip domain from caption URLs 2019-12-01 17:52:39 -05:00
04d56420d1 Run 'crystal tool format' 2019-11-28 08:20:44 -06:00
a017574f74 Add support for force_resolve to QUIC client 2019-11-28 08:19:28 -06:00
0e3a48ff76 Update QUICPool 2019-11-24 13:41:47 -05:00
276bf09238 Skip preferences for assets 2019-11-20 12:04:53 -05:00
d46b26e3bc Use QUIC for connections to YouTube 2019-11-18 17:28:32 -05:00
236c172c6f Merge pull request #896 from sh4dowb/master
Fixed double quotes in meta description
2019-11-14 10:38:38 -05:00
c07cd3a856 Fix typo in playlist url 2019-11-14 10:11:33 -05:00
79da61782b Fixed double quotes in meta description 2019-11-11 19:00:23 +03:00
8af87f1a8b Fix updating of cookies 2019-11-10 10:02:02 -05:00
494c954cbb Add etag to /api/v1/annotations 2019-11-09 22:05:17 -05:00
71bc9eea28 Add support for Anti-Captcha 2019-11-09 14:22:39 -05:00
e3b2bcfd06 Fix ID for search duration 2019-11-08 09:29:33 -05:00
142d974641 Use force_resolve for search suggestions 2019-11-07 12:25:34 -05:00
0e1d6aa85c Update error messages for video extractor 2019-11-05 19:39:11 -05:00
bcdb8cd770 Fix default fo dark_mode 2019-11-04 17:08:13 -05:00
7b2ca55089 Fix escaping in email query 2019-11-04 12:26:05 -05:00
f6ef0b684a Fix word-break for links in channel RSS 2019-11-03 08:53:16 -05:00
02e1cdf210 Add support for '/yts/img' endpoint 2019-11-01 12:02:38 -04:00
b58950c574 Fix decoding for channel playlists extractor 2019-11-01 12:00:59 -04:00
833a60f29c Update pubsub to use client pool 2019-11-01 07:34:36 -04:00
13e7cca1a4 Bump read timeout 2019-10-28 12:34:50 -04:00
0f3c477ff3 Remove dependency on ImageMagick (replace with rsvg-convert) 2019-10-28 10:49:05 -04:00
25c8cd9246 Fix escaping for search params 2019-10-28 06:17:39 -04:00
c58841100a Fix extractor for channel community cursor 2019-10-27 21:44:17 -04:00
03e24cccd0 Add support for configurable administrator email 2019-10-27 14:18:07 -04:00
35f011758d Merge pull request #850 from XVnNzb2kFEhV9Tjm/master
Add Japanese translations
2019-10-27 14:09:31 -04:00
2ebfaf76f2 Refactor continuation token handling 2019-10-27 13:50:42 -04:00